### Changed

  - If the SSH agent supports deterministic DSA/ECDSA signatures, mark *all*
    SSH keys as suitable.